安全自动化合规审计与自动修复

通过自动化来节省人力，提高效率。

• #1: 大规模监管

  Organizing Your AWS Environment Using Multiple Accounts (whitepaper)

  Building a Data Perimeter on AWS (whitepaper)

• #2: 监管自动化

  AWS re:Invent 2022 - Setting up controls at scale in your AWS environment (COP318)

  AWS re:Invent 2021 - Customizing and scaling your AWS Control Tower environment

  AWS Summit DC 2022 - Building and governing multi-accounts using AWS Control Tower

  AWS re:Inforce 2022 - Getting more out of your service control policies, featuring Morgan Stanley

• [PDF]Automating Governance A Managed Service Approach to Security and Compliance on AWS

• #3: 预防性控制

  AWS re:Inforce 2022 - Getting more out of your service control policies, featuring Morgan Stanley

  AWS re:Invent 2022 - Governance and security with infrastructure as code (DOP314)

  AWS CloudFormation Hooks | Serverless Office Hours

  Check AWS CloudFormation Templates for Policy Compliance Using CloudFormation Guard

• #4: 检测性控制

  AWS re:Inforce 2022 - Deep dive into compliance and auditing at scale (GRC402)

  AWS re:Inforce 2022 - Quantifying your AWS Config compliance posture with conformance packs (GRC211)

  AWS re:Invent 2022 - Threat detection and incident response using cloud-native services (SEC309)

• AWS re:Invent 2016: Compliance Architecture: How Capital One Automates the Guard Rails (ARC312)